Server Security - Page 47Server Security - Page 47.5 - Results from #930

Discover Server Security News

BSD Based Operating Systems: IPCS Vulnerability

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This advisory is for all 386BSD-derived OSes, including all versions of FreeBSD, NetBSD and OpenBSD. "An unprivileged local user can cause every process on the system to hang during exiting. In other words, after the system call is issued, no . . .

LinuxSecurity.com Team
Jun 08, 2000

Security scare as outsiders get access to NetBSD software password

Developers of the NetBSD open source operating system say a recent security breach did not compromise the software's source code. NetBSD developer and project spokesman Charles Hannum has confirmed that a key developer's password was "discovered" by outsiders.

LinuxSecurity.com Team
Jun 07, 2000

Hardening Linux Machines For Web Services

This is a introductory article on securing your Linux server. It starts with physical security then briefly discusses network security. "Your objective is to add as many rings or layers as possible, making the potential cracker take more . . .

LinuxSecurity.com Team
Jun 06, 2000

Web security ups ante, goes nuclear

British Internet companies are increasingly turning to complexes capable of withstanding a nuclear onslaught in the battle against computer hackers and other threats, according to one security consultant. . . .

LinuxSecurity.com Team
Jun 01, 2000

E-Commerce Solutions: An Apache Overview

This ApacheToday article discusses what issues are involved with Apache to configure an E-Commerce site. "So, E-Commerce is the buzzword, but how do you actually produce an E-Commerce site? ... Here's a quick guide to some of the issues . . .

LinuxSecurity.com Team
May 31, 2000

Update: Blocking "Killer Resume"

Jose Nazario has updated the .cf/.mc patch on his mirror site to include "Killer Resume" and was kind enough to share the fix with us. The patch, designed to block the ILOVEYOU worm and related worm/virus medleys, works . . .

LinuxSecurity.com Team
May 31, 2000

NIPC Tool to Detect the mstream DDoS

The potential represented by the "mstream" Distributed Denial of Service (DDoS) exploit is a serious and continuing threat. This advisory provides an update to a previously delivered NIPC DDoS detection tool that now allows users to identify the presence of . . .

LinuxSecurity.com Team
May 26, 2000

Secure Deletion of Data

With the use of increasingly sophisticated encryption systems, an attacker wishing to gain access to sensitive data is forced to look elsewhere for information. One avenue of attack is the recovery of supposedly erased data from magnetic media or random-access . . .

LinuxSecurity.com Team
May 25, 2000

Cracked! Part 3: Hunting the Hunter

Noel continues the story of when some Unix boxes that he helped admin were cracked. This article talks about some of the efforts made to track down the cracker and some surprises. This is the third part of the story . . .

LinuxSecurity.com Team
May 22, 2000

Building An E-Commerce Site - Part 2 - Users and Sessions

This is the second article in a three-part series dealing with using PHP 4 and MySQL to make a comprehensive e-commerce storefront solution. This article covers session management within the store, user privileges, and a few security concerns. . . .

LinuxSecurity.com Team
May 19, 2000

BUGTRAQ Vulnerability Database Statistics

Ever wanted to know which operating systems and applications have the most reported security vulnerabilities? Are there more known vulnerabilities in Windows NT or Linux? To find out check out the BUGTRAQ Vulnerability Database statistics page. . . .

LinuxSecurity.com Team
May 15, 2000

Sendmail 8.11.0 Beta Release Includes TLS

"... Transport Layer Security (TLS) is now in open source sendmail. As the official announcement explains, "Ever since the easing of crypto export regulations in the United States, we have been working on releasing the STARTTLS and SMTP Authentication Security . . .

LinuxSecurity.com Team
May 10, 2000

The trouble with redirects

LWN has written up an article describing the "redirect" security difficulty found by the folks at Digital Creations while tracking down a security problem with the Zope application server. "Given the way the web and authentication-based sites work, a suitably . . .

LinuxSecurity.com Team
May 09, 2000

A Complete, Secure User Login System

Tim Perdue writes about a new PHP library he's written. "When I started seeing spam messages posted to the new column annotation system, I knew I would have to create some sort of user authentication system that helps weed out . . .

LinuxSecurity.com Team
May 09, 2000

Webserver Security (Part II)

This second part of our two-part series on webserver security explores the problem of keeping private data in publicly accessible areas of you server and keeping data from untrustworthy sources from entering your system. Covers Apache, FTP server, PHP and . . .

LinuxSecurity.com Team
May 09, 2000

Cheap PC Hacker Strikes Again

Internet appliance-hacker Ken Segler has struck again. The Las Vegas engineer -- who created a cult hit when he discovered that a cable tweak would transform the $99 I-Opener Internet appliance into a fully operational PC -- has found . . .

LinuxSecurity.com Team
May 02, 2000

Expert warns of powerful new hacker tool

A potent new software tool has emerged for launching attacks similar to, but more lethal than, the ones that took down Yahoo and other major Web sites in February. The new tool, called "Mstream," joins Trinoo, TFN2K, Stacheldraht, Shaft . . .

LinuxSecurity.com Team
May 02, 2000

Cybernet Announces Linux-based VPN Software

Ann Arbor, Mich.-based Cybernet Systems today announced its Linux-based NetMAX VPN Server Suite, a software package designed to set up a virtual private network. The VPN Server Suite, scheduled for a June release, includes a graphical user interface for simpler, . . .

LinuxSecurity.com Team
May 01, 2000

Cybernet To Offer First Low-Cost Linux VPN Software

Cybernet Systems Corporation today announced its plan to introduce the industry's first low-cost Linux-based software for creating a Virtual Private Network (VPN). The new NetMAX VPN Server Suite is expected to be the first product to bring secure VPN Internet . . .

LinuxSecurity.com Team
Apr 30, 2000

Implementing Access Control Lists using Linux

Here's information on implementing ACLs using Linux. Access Control Lists (ACLs) support more fine-grained permissions. Arbitrary users and groups can be granted or denied access in addition to the three traditional classes of users. ... The main advantage of . . .

LinuxSecurity.com Team
Apr 26, 2000

Server Security - Page 47.5

Magnet Goblin Hackers Exploit One-Day Flaws to Deploy Custom Linux Malware

New Bifrost Malware Evades Detection, Threatens Linux Server Security

Cryptocurrency Mining Migo Malware Attacks Linux Redis Servers